ScopeBench:智能体在目标压力下能否守住参与边界?
原标题:ScopeBench: Do Agents Preserve Engagement Boundaries Under Goal Pressure?
AI 摘要
研究团队发布 ScopeBench,一个包含 30 个死胡同式智能体安全任务的基准,用于衡量智能体在目标压力下是否遵守用户声明的参与边界(scope)。每个任务在无 scope 与有 scope 两种条件下运行,通过确定性验证器与智能体评判器双重评分,并基于 100 条人工标注轨迹校准评判器。在 8 个模型上测试发现,原始能力与 scope 遵守度差异显著,评判器还发现 331 处机械验证遗漏的违规;团队开源了基准、评估代码及 2160 条 ATIF 轨迹。
正文节选
ScopeBench: Do Agents Preserve Engagement Boundaries Under Goal Pressure? Abstract Agents are increasingly deployed with real autonomy in web application and network penetration testing, where a single out-of-scope action can breach a client’s engagement boundary. Existing offensive-security benchmarks measure raw hacking capability; as those benchmarks saturate, the actual barrier to deployment is a special case of alignment: scope adherence. We introduce ScopeBench, a benchmark of 30 dead-end